Add on-authenticated hook, and tokens in the hash.